CVE-2022-23434: A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to…

PriorityP412low3.3CVSS 3.1

AVLACLPRLUINSUCNILAN

EPSS

0.24%

14.6th percentile

A vulnerability using PendingIntent in Bixby Vision prior to versions 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below allows attackers to execute privileged action by hijacking and modifying the intent.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
samsung	bixby	< 3.7.50.6	3.7.50.6
samsung	bixby	< 3.7.60.8	3.7.60.8
samsung_mobile	bixby_vision	>= - < 3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below	3.7.60.8 in Android S(12), 3.7.50.6 in Andorid R(11) and below

CVSS provenance

nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.